# SBOM for sequence-align 0.4.0

> Efficient implementations of Needleman-Wunsch and other sequence alignment algorithms in Rust with Python bindings.

The Python package sequence-align 0.4.0 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/sequence-align@0.4.0`
- PyPI: https://pypi.org/project/sequence-align/0.4.0/
- Requires Python: \<3.15,\>=3.10
- Bug Tracker: <https://github.com/kensho-technologies/sequence_align/issues>
- Changelog: <https://github.com/kensho-technologies/sequence_align/blob/main/CHANGELOG.md>
- Homepage: <https://github.com/kensho-technologies/sequence_align>
- source: <https://github.com/kensho-technologies/sequence_align>

## SBOMs

### sequence\_align-0.4.0-cp310-abi3-macosx\_10\_12\_x86\_64.whl

- [sequence\_align-0.4.0.dist-info/sboms/sequence\_align.cyclonedx.json](https://pypi.sbomify.com/artifact/007c8c32-3dd7-5248-afcf-58543dced583/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### sequence\_align-0.4.0-cp310-abi3-macosx\_11\_0\_arm64.whl

- [sequence\_align-0.4.0.dist-info/sboms/sequence\_align.cyclonedx.json](https://pypi.sbomify.com/artifact/7229aad1-30ce-5c12-bb35-6fd685ac3ed6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### sequence\_align-0.4.0-cp310-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl

- [sequence\_align-0.4.0.dist-info/sboms/sequence\_align.cyclonedx.json](https://pypi.sbomify.com/artifact/857e0501-4188-5fd5-b8b5-e6e8e41cfc4a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### sequence\_align-0.4.0-cp310-abi3-manylinux\_2\_17\_armv7l.manylinux2014\_armv7l.whl

- [sequence\_align-0.4.0.dist-info/sboms/sequence\_align.cyclonedx.json](https://pypi.sbomify.com/artifact/7a1e8bfd-8a2c-5a15-bb60-16ea2d0797f5/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### sequence\_align-0.4.0-cp310-abi3-manylinux\_2\_17\_ppc64le.manylinux2014\_ppc64le.whl

- [sequence\_align-0.4.0.dist-info/sboms/sequence\_align.cyclonedx.json](https://pypi.sbomify.com/artifact/74316749-9902-5f36-b968-02a4d69188fb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### sequence\_align-0.4.0-cp310-abi3-manylinux\_2\_17\_s390x.manylinux2014\_s390x.whl

- [sequence\_align-0.4.0.dist-info/sboms/sequence\_align.cyclonedx.json](https://pypi.sbomify.com/artifact/0ec962ad-e604-55e0-81b6-dd33fe507d0b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### sequence\_align-0.4.0-cp310-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [sequence\_align-0.4.0.dist-info/sboms/sequence\_align.cyclonedx.json](https://pypi.sbomify.com/artifact/3c1f6be3-68f8-54b6-8723-1488737319dd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### sequence\_align-0.4.0-cp310-abi3-manylinux\_2\_5\_i686.manylinux1\_i686.whl

- [sequence\_align-0.4.0.dist-info/sboms/sequence\_align.cyclonedx.json](https://pypi.sbomify.com/artifact/fc1ff74f-0a69-5c36-9e58-3f4dbf2f9491/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### sequence\_align-0.4.0-cp310-abi3-win32.whl

- [sequence\_align-0.4.0.dist-info/sboms/sequence\_align.cyclonedx.json](https://pypi.sbomify.com/artifact/caf84512-3846-5551-9890-f7cb7c7637c6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### sequence\_align-0.4.0-cp310-abi3-win\_amd64.whl

- [sequence\_align-0.4.0.dist-info/sboms/sequence\_align.cyclonedx.json](https://pypi.sbomify.com/artifact/07db14d0-f1af-5ef1-970a-4c2c10d5fb58/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [RUSTSEC-2026-0176](https://osv.dev/vulnerability/RUSTSEC-2026-0176) | high (8.7) | pyo3 0.28.3 (crates.io) | 0.29.0 | Out-of-bounds read in \`nth\` / \`nth\_back\` for \`PyList\` and \`PyTuple\` iterators |
| [RUSTSEC-2026-0177](https://osv.dev/vulnerability/RUSTSEC-2026-0177) | medium (6.3) | pyo3 0.28.3 (crates.io) | 0.29.0 | Missing \`Sync\` bound on \`PyCFunction::new\_closure\` closures |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/sequence-align@0.4.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/sequence-align/0.4.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/sequence-align/0.4.0